CVE-2011-1155— Gentoo logrotate logrotate.c writeState函数拒绝服务漏洞

一分钟漏洞结论

复制摘要 复制引用

影响对象

n/a n/a

利用判断

尚无明确在野利用证据，仍需结合暴露面评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

logrotate 3.7.9及之前版本的logrotate.c中的writeState函数中存在资源管理错误漏洞。上下文攻击者可以借助日志文件名称中的（1）“\n”（换行）或者（2）“\”（反斜杠），导致拒绝服务（循环中断）。该漏洞已经通过在主机名称或者虚拟机名称基础上自动创建的文件名称得到证明。

CVE-2011-1155 影响 n/a n/a。尚无明确在野利用证据，仍需结合暴露面评估。logrotate 3.7.9及之前版本的logrotate.c中的writeState函数中存在资源管理错误漏洞。上下文攻击者可以借助日志文件名称中的（1）“\n”（换行）或者（2）“\”（反斜杠），导致拒绝服务（循环中断）。该漏洞已经通过在主机名称或者虚拟机名称基础上自动创建的文件名称得到证明。 CVE-2011-1155 漏洞详情，神龙漏洞库，https://cve.imfht.com/detail/CVE-2011-1155

一、 漏洞 CVE-2011-1155 基础信息

受影响产品

二、漏洞 CVE-2011-1155 的公开POC

三、漏洞 CVE-2011-1155 的情报信息

CVE-2011-1155 厂商安全公告 (6)

• https://bugzilla.redhat.com/show_bug.cgi?id=680797 x_refsource_CONFIRM
• http://secunia.com/advisories/43955 third-party-advisory x_refsource_SECUNIA
• http://www.vupen.com/english/advisories/2011/0961 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0872 vdb-entry x_refsource_VUPEN
• http://www.vupen.com/english/advisories/2011/0791 vdb-entry x_refsource_VUPEN
• http://www.mandriva.com/security/advisories?name=MDVSA-2011:065 vendor-advisory x_refsource_MANDRIVA

CVE-2011-1155 邮件列表归档 (35)

• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056992.html vendor-advisory x_refsource_FEDORA
• http://lists.fedoraproject.org/pipermail/package-announce/2011-April/057845.html vendor-advisory x_refsource_FEDORA
• http://openwall.com/lists/oss-security/2011/03/04/16 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/04/29 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/08/5 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/07/5 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/07/11 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/23/11 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/10/6 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/05/8 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/04/26 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/04/32 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/10/3 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/11/3 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/07/6 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/06/6 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/04/17 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/05/6 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/04/25 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/04/27 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/14/26 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/04/22 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/04/18 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/10/2 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/06/4 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/04/31 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/04/28 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/04/24 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/06/5 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/10/7 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/11/5 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/04/19 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/04/30 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/06/3 mailing-list x_refsource_MLIST
• http://openwall.com/lists/oss-security/2011/03/05/4 mailing-list x_refsource_MLIST

CVE-2011-1155 其他参考 (1)

• http://www.redhat.com/support/errata/RHSA-2011-0407.html vendor-advisory x_refsource_REDHAT

• https://www.cve.org/CVERecord?id=CVE-2011-1155

同批安全公告 · n/a · 2011-03-30 · 共 9 条

IV. Related Vulnerabilities

V. Comments for CVE-2011-1155